agenttesla | 4536-140-0x0000000000400000-0x000000000043C000-memory[.]dmp | Triage

Submit
Reports

Overview

overview

Static

static

4536-140-0...ry.exe

windows7-x64

1

4536-140-0...ry.exe

windows10-2004-x64

3

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

4536-140-0x0000000000400000-0x000000000043C000-memory.exe

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

4536-140-0x0000000000400000-0x000000000043C000-memory.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

1 signatures

150 seconds

General

Target

4536-140-0x0000000000400000-0x000000000043C000-memory.dmp
Size

240KB
MD5

129f1a58481894af2abaa2fcfd2d6e20
SHA1

3f30f7c7b11bb5f8e3a48cecd654ab0d041c4300
SHA256

1f0517e847b3eb157ff52a36cc1b8780619b3dcee8b57ee867844385bc421828
SHA512

42b4caa63173a7a08c2c84de0890d96ba2b31de5b67bf03bef8ec7cc8e09d8991b6e1630027f68c72bb1f5c927163f17e9ed1becc9cd71617890529003501dbd
SSDEEP

3072:7yoU2sTLN/w8akAOoZQ2yL6UKaWj+IFuGXy/CTWaGfBfVgFbRRryz+Ld:7i3/bofjUBWjvF0/CKNfBOXrq+L

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.chroasia.org
Port:
587
Username:
[email protected]
Password:
Bhatia_rl123
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Files

4536-140-0x0000000000400000-0x000000000043C000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy